Scan Outlook archived PST files

Nippy

F-Secure had virus alert on one of the user's email archived pst file. That archived file is over 200MB. F-Secure doesn't seems to be able to report which file was infected. Also it seems like F-Secure is not able to clean or quarantine any malicious items within the archived pst file. What are my options? Also, can F-Secure scan inside any pst files? Thanks in advance for assistance.

SeanV

Dear Nippy,

With regards to your enquiry, kindly refer to the below community post:

 

http://community.f-secure.com/t5/Security-for-PC/How-to-find-which-mailbox-is/td-p/30358
 
Thanks.
Best Regards,
Sean Veloo

..........................................................................................................................................................................................................................
Has somebody helped you? Say thanks by giving kudos. Has your issue been solved? Mark the post using "Accept As Solution" button to let others know.

NikK

If anyone finds this thread you should know that there is a VBA program(code) that can extract and save all attachments from an Outlook folder including subfolders, so you then easily can scan the folder with all attachments to find which emails are infected. Each file name includes the name of the datafile(PST), folder name, email subject and attachment name so it's easy to identify and delete those emails in Outlook.

It only extracts the attachments because it's highly unlikely that an email body is infected. And that also heavily reduces the number of files that needs to be created on the hard drive. It's been tested and proved successful with over 2 GB of emails. 

 

Instructions and the VBA code can be found here:

http://community.f-secure.com/t5/Security/virus-s-imside-Aquarius/m-p/40627/highlight/true#M7398

 

In case you run into any problem, also read the following 2 pages in the linked thread above. Those cover the most likely problem scenarios.